Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: Qb+ETqXhjtTEd/errsdT4ykUI0OUEVmAsZCw+JOwAr4=
Subject key identifier: FF:F4:99:1A:2A:D0:26:1F:AD:9A:01:0C:DE:7E:BA:47:07:74:19:82
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 019A7293C3A08EE488FF2F03B8CF61A4E047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 107D
Signing time: Tue 11 Nov 2025 11:01:17 +0000
Manifest this update: Tue 11 Nov 2025 11:01:17 +0000
Manifest next update: Wed 12 Nov 2025 11:01:17 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: kgwoZCm8uf25BtKhcF1GdsIrOn2HMuxtZTYPJ+NCpyw=)
2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:c3:a0:8e:e4:88:ff:2f:03:b8:cf:61:a4:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Nov 11 11:01:17 2025 GMT
Not After : Nov 12 11:01:17 2025 GMT
Subject: CN=fff4991a2ad0261fad9a010cde7eba4707741982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:12:46:ca:85:00:60:08:4a:b3:f8:36:c7:
13:22:cc:99:3f:72:df:21:33:aa:03:7f:08:34:86:
ce:73:c8:0b:01:94:5e:65:a0:d7:78:54:11:53:26:
30:08:2b:3b:a7:c9:73:fa:0f:3e:1b:1f:b2:18:69:
84:95:18:45:2d:36:00:8f:5a:5d:ff:14:bd:3a:40:
ef:54:a2:b9:4f:0d:ab:06:19:86:54:14:dc:7f:44:
a7:2b:8e:cb:cc:4f:a1:eb:81:72:89:4c:cf:f2:1d:
28:18:56:b4:a2:c1:bd:79:75:78:d7:97:1d:b8:ac:
aa:9f:d0:06:aa:66:4b:26:e2:c6:0c:94:fa:d7:8a:
0f:e3:04:66:66:fe:7d:5b:f3:7c:13:6a:15:73:de:
e4:1a:f0:62:3b:0d:e8:72:03:96:4b:db:42:8f:ac:
6d:3a:16:6d:86:a1:a9:71:c8:94:ce:50:38:ba:6e:
51:82:83:4e:f8:90:66:4a:7d:4f:81:07:a9:ef:a5:
be:63:d9:e8:69:1e:4d:8b:70:96:4b:0c:af:40:ff:
02:d8:17:5b:eb:5a:0d:6b:0b:21:6f:dd:7e:f0:10:
41:4a:e8:3c:c5:4b:6f:d1:0c:ea:95:f8:86:a3:45:
35:e7:12:43:1c:e3:cc:7b:71:d1:08:d1:1b:a8:a5:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:99:1A:2A:D0:26:1F:AD:9A:01:0C:DE:7E:BA:47:07:74:19:82
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:de:4e:f8:63:ca:b5:27:94:84:89:9e:f2:cb:a8:37:6e:5a:
c0:ca:74:22:38:42:07:b4:4f:4d:83:92:ea:89:4c:77:88:8f:
73:d6:b6:3c:d6:15:75:e1:78:88:1f:b9:73:93:21:d7:f4:a6:
eb:a4:63:b1:85:4e:5d:59:d4:3a:13:36:f4:4d:5e:37:51:0a:
a3:87:35:11:ea:22:81:90:37:f1:8c:55:8b:fa:f2:aa:bd:6a:
41:11:c0:b4:58:83:ee:fe:0f:db:8c:97:ae:5a:69:76:cd:f2:
81:24:84:94:68:63:73:b3:bd:15:68:bc:ed:28:03:c9:fc:c9:
06:9a:1c:c2:fc:e4:75:3d:0a:57:2d:11:d9:64:a3:b5:73:d5:
0a:96:3d:86:41:20:ed:0a:78:64:e8:6f:df:35:aa:52:30:62:
96:f8:b9:10:96:20:18:73:8b:3b:d7:46:b4:18:3f:f3:00:35:
e3:16:52:66:1b:0a:e8:b9:07:a3:5f:7b:99:6d:92:91:8b:22:
ec:a4:9c:da:42:55:44:99:b9:e3:db:38:ac:d6:3b:34:db:f7:
da:a8:8a:a1:29:ab:80:57:59:98:6d:5d:65:32:73:e8:fb:79:
d7:80:4d:1f:f1:1f:94:07:c2:88:cd:99:28:2f:a4:db:89:01:
f2:3f:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:37 2025 by rpki-client